Phishing Scams Targeting the UMN

Friday, July 18, 2014

Phishing Example 52: I've shared an item with you.

Received July 2014.

This has been sent from a compromised umn.edu account (or accounts), so you may not see the tag ***SPAM*** in the subject line.

Message body:

Subject: I've shared an item with you.
From:
To: undisclosed-recipients:;
*Sent:* Friday, July 18, 2014 12:59 PM
*Subject:* I've shared an item with you.
Hello,
I just shared a document with you using Google Drive. All you have to do is
go to https://drive.google.com <http://xxx.xxxxx.com/platform/index.htm> to
view it and sign in with your email address, as it is stored online.
Note: it's not an attachment, it's a document stored online
Best Regards

This is what the link takes you to, but it is NOT how a real Google doc will prompt you for your login.
Google docs do not ask you to use Yahoo, Windows or AOL logins:

If you "login" you will be directed to a bogus doc that is in Google. However your credentials will be in the phishers hands, and your account will be sending spam (probably just like this one).

If you, or someone you know entered an ID and password in this, change that password immediately!